Microsoft QUIC Denial of Service Vulnerability

🔗 CVE IDs covered (1)

🎯 Affected products17

• .NET 7.0
• .NET 8.0
• Microsoft Visual Studio 2022 version 17.4
• Microsoft Visual Studio 2022 version 17.6
• Microsoft Visual Studio 2022 version 17.8
• Microsoft Visual Studio 2022 version 17.9
• PowerShell 7.3
• PowerShell 7.4
• Windows 11 Version 22H2 for ARM64-based Systems
• Windows 11 Version 22H2 for x64-based Systems
• Windows 11 Version 23H2 for ARM64-based Systems
• Windows 11 Version 23H2 for x64-based Systems
• Windows 11 version 21H2 for ARM64-based Systems
• Windows 11 version 21H2 for x64-based Systems
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2022, 23H2 Edition (Server Core installation)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 17.9.3 KB5035857 (Security Update) — fixed build 10.0.20348.2340 KB5035959 (SecurityHotpatchUpdate) — fixed build 10.0.20348.2333 KB5035854 (Security Update) — fixed build 10.0.22000.2836 KB5035853 (Security Update) — fixed build 10.0.22621.3296 KB5035853 (Security Update) — fixed build 10.0.22631.3296 KB5035856 (Security Update) — fixed build 10.0.25398.763 KBRelease Notes (Security Update) — fixed build 7.3.12 KBRelease Notes (Security Update) — fixed build 7.4.2 KBRelease Notes (Security Update) — fixed build 17.4.17 KBRelease Notes (Security Update) — fixed build 17.6.13 KBRelease Notes (Security Update) — fixed build 17.8.8 KB5036451 (Monthly Rollup) — fixed build 7.0.17 KB5036452 (Security Update) — fixed build 8.0.3

🔗 References (21)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26190
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.9
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5035857
• referencehttps://support.microsoft.com/help/5035857
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5035959
• referencehttps://support.microsoft.com/help/5035959
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5035854
• referencehttps://support.microsoft.com/help/5035854
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5035853
• referencehttps://support.microsoft.com/help/5035853
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5035856
• referencehttps://support.microsoft.com/help/5035856
• patchhttps://github.com/PowerShell/Announcements/issues/73
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
• patchhttps://dotnet.microsoft.com/en-us/download/dotnet/7.0
• referencehttps://support.microsoft.com/help/5036451
• patchhttps://dotnet.microsoft.com/en-us/download/dotnet/8.0
• referencehttps://support.microsoft.com/help/5036452